GoFlateLoader is a tool tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed June 11, 2026; most recent activity June 11, 2026.
GoFlateLoader, a Golang-based malware loader, is being used to deliver various infostealers, including Lumma, Vidar, StealC, Amatera, and Remus. Its design is simple, employing a manual PE loader without advanced…